Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-8285 (GCVE-0-2020-8285)
Vulnerability from cvelistv5 – Published: 2020-12-14 19:39 – Updated: 2026-04-16 14:07
VLAI
EPSS
VEX
Summary
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-674 - Uncontrolled Recursion (CWE-674)
Assigner
References
20 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | https://github.com/curl/curl |
Affected:
libcurl 7.21.0 to and including 7.73.0
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T09:56:28.307Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://hackerone.com/reports/1045844"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/curl/curl/issues/6255"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"name": "FEDORA-2020-ceaf490686",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/"
},
{
"name": "[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html"
},
{
"name": "FEDORA-2020-7ab62c73bc",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/"
},
{
"name": "GLSA-202012-14",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202012-14"
},
{
"name": "DSA-4881",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2021/dsa-4881"
},
{
"name": "20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2021/Apr/51"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20210122-0007/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/kb/HT212325"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/kb/HT212326"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/kb/HT212327"
},
{
"name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
},
{
"name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2020-8285",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-16T14:06:58.616126Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-16T14:07:21.315Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "https://github.com/curl/curl",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "libcurl 7.21.0 to and including 7.73.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "Uncontrolled Recursion (CWE-674)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-19T23:23:28.000Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://hackerone.com/reports/1045844"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/curl/curl/issues/6255"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"name": "FEDORA-2020-ceaf490686",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/"
},
{
"name": "[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html"
},
{
"name": "FEDORA-2020-7ab62c73bc",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/"
},
{
"name": "GLSA-202012-14",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202012-14"
},
{
"name": "DSA-4881",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2021/dsa-4881"
},
{
"name": "20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2021/Apr/51"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20210122-0007/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/kb/HT212325"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/kb/HT212326"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/kb/HT212327"
},
{
"name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
},
{
"name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "support@hackerone.com",
"ID": "CVE-2020-8285",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "https://github.com/curl/curl",
"version": {
"version_data": [
{
"version_value": "libcurl 7.21.0 to and including 7.73.0"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Uncontrolled Recursion (CWE-674)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://hackerone.com/reports/1045844",
"refsource": "MISC",
"url": "https://hackerone.com/reports/1045844"
},
{
"name": "https://github.com/curl/curl/issues/6255",
"refsource": "MISC",
"url": "https://github.com/curl/curl/issues/6255"
},
{
"name": "https://curl.se/docs/CVE-2020-8285.html",
"refsource": "MISC",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"name": "FEDORA-2020-ceaf490686",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/"
},
{
"name": "[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html"
},
{
"name": "FEDORA-2020-7ab62c73bc",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/"
},
{
"name": "GLSA-202012-14",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202012-14"
},
{
"name": "DSA-4881",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-4881"
},
{
"name": "20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2021/Apr/51"
},
{
"name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210122-0007/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20210122-0007/"
},
{
"name": "https://support.apple.com/kb/HT212325",
"refsource": "CONFIRM",
"url": "https://support.apple.com/kb/HT212325"
},
{
"name": "https://support.apple.com/kb/HT212326",
"refsource": "CONFIRM",
"url": "https://support.apple.com/kb/HT212326"
},
{
"name": "https://support.apple.com/kb/HT212327",
"refsource": "CONFIRM",
"url": "https://support.apple.com/kb/HT212327"
},
{
"name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"
},
{
"name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"
},
{
"name": "https://www.oracle.com//security-alerts/cpujul2021.html",
"refsource": "MISC",
"url": "https://www.oracle.com//security-alerts/cpujul2021.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpujan2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpujan2022.html"
},
{
"name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
"refsource": "MISC",
"url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
"refsource": "CONFIRM",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2020-8285",
"datePublished": "2020-12-14T19:39:04.000Z",
"dateReserved": "2020-01-28T00:00:00.000Z",
"dateUpdated": "2026-04-16T14:07:21.315Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-8285",
"date": "2026-08-04",
"epss": "0.09917",
"percentile": "0.95105"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"7.21.0\", \"versionEndExcluding\": \"7.74.0\", \"matchCriteriaId\": \"61666FBE-C3B7-4449-89C3-07288182D638\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36D96259-24BD-44E2-96D9-78CE1D41F956\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FE996B1-6951-4F85-AA58-B99A379D2163\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3C19813-E823-456A-B1CE-EC0684CE1953\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C767AA1-88B7-48F0-9F31-A89D16DCD52C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD7447BC-F315-4298-A822-549942FC118B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:netapp:hci_storage_node_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BC4299D-05D3-4875-BC79-C3DC02C88ECE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"02DEB4FB-A21D-4CB1-B522-EEE5093E8521\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.14.6\", \"matchCriteriaId\": \"B0E97851-4DFF-4852-A339-183331F4ACBC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.15\", \"versionEndExcluding\": \"10.15.7\", \"matchCriteriaId\": \"DB8A73F8-3074-4B32-B9F6-343B6B1988C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*\", \"matchCriteriaId\": \"CFE26ECC-A2C2-4501-9950-510DE0E1BD86\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*\", \"matchCriteriaId\": \"26108BEF-0847-4AB0-BD98-35344DFA7835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*\", \"matchCriteriaId\": \"0FD3467D-7679-479F-9C0B-A93F7CD0929D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*\", \"matchCriteriaId\": \"D4C6098E-EDBD-4A85-8282-B2E9D9333872\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*\", \"matchCriteriaId\": \"518BB47B-DD76-4E8C-9F10-7EBC1E146191\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*\", \"matchCriteriaId\": \"63940A55-D851-46EB-9668-D82BEFC1FE95\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*\", \"matchCriteriaId\": \"68C7A97A-3801-44FA-96CA-10298FA39883\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D69914D-46C7-4A0E-A075-C863C1692D33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*\", \"matchCriteriaId\": \"9CDB4476-B521-43E4-A129-8718A8E0A8CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"A654B8A2-FC30-4171-B0BB-366CD7ED4B6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1F4BF7F-90D4-4668-B4E6-B06F4070F448\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F441A43-1669-478D-9EC8-E96882DE4F9F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*\", \"matchCriteriaId\": \"C1C795B9-E58D-467C-83A8-2D45C792292F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"11.0\", \"versionEndExcluding\": \"11.3\", \"matchCriteriaId\": \"4E699CCC-31F5-458E-A59C-79B3AF143747\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E39D442D-1997-49AF-8B02-5640BE2A26CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4479F76A-4B67-41CC-98C7-C76B81050F8E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"5E63B7B2-409A-476E-BA12-2A2D2F3B85DE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"ADB5D4C9-DA14-4188-9181-17336F9445F6\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"90B7CFBF-761C-4EAA-A322-EF5E294AADED\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp2410\", \"matchCriteriaId\": \"E74AAF52-1388-4BD9-B17B-3A6A32CA3608\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"A107698C-9C63-44A9-8A2B-81EDD5702B4C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"0FC0460E-4695-44FB-99EE-28B2C957B760\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"BD54A092-85A7-4459-9C69-19E6E24AC24B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"5F813DBC-BA1E-4C73-AA11-1BD3F9508372\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"xcp3110\", \"matchCriteriaId\": \"416B805F-799A-4466-AC5A-93D083A2ABBD\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.0.1.1\", \"matchCriteriaId\": \"B0F46497-4AB0-49A7-9453-CC26837BF253\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"8.2.0\", \"versionEndExcluding\": \"8.2.12\", \"matchCriteriaId\": \"5722E753-75DE-4944-A11B-556CB299B57D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"9.0.0\", \"versionEndExcluding\": \"9.0.6\", \"matchCriteriaId\": \"DC0F9351-81A4-4FEA-B6B5-6E960A933D32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.\"}, {\"lang\": \"es\", \"value\": \"curl versiones 7.21.0 hasta 7.73.0 e incluy\\u00e9ndola, es vulnerable a una recursividad no controlada debido a un problema de desbordamiento de la pila en el an\\u00e1lisis de coincidencias del comod\\u00edn FTP\"}]",
"id": "CVE-2020-8285",
"lastModified": "2024-11-21T05:38:39.410",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2020-12-14T20:15:13.983",
"references": "[{\"url\": \"http://seclists.org/fulldisclosure/2021/Apr/51\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"source\": \"support@hackerone.com\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://curl.se/docs/CVE-2020-8285.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://github.com/curl/curl/issues/6255\", \"source\": \"support@hackerone.com\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"https://hackerone.com/reports/1045844\", \"source\": \"support@hackerone.com\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\", \"source\": \"support@hackerone.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202012-14\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212325\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212326\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212327\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4881\", \"source\": \"support@hackerone.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"source\": \"support@hackerone.com\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2021/Apr/51\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://curl.se/docs/CVE-2020-8285.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://github.com/curl/curl/issues/6255\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"https://hackerone.com/reports/1045844\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Permissions Required\"]}, {\"url\": \"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202012-14\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212325\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212326\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT212327\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4881\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "support@hackerone.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"support@hackerone.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-674\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-674\"}, {\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"microsoft_vex": {
"current_release_date": "2020-12-15T00:00:00.000Z",
"cve": "CVE-2020-8285",
"id": "msrc_CVE-2020-8285",
"initial_release_date": "2020-12-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-8285.json",
"version": "1"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-8285\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2020-12-14T20:15:13.983\",\"lastModified\":\"2026-04-16T15:16:43.167\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.\"},{\"lang\":\"es\",\"value\":\"curl versiones 7.21.0 hasta 7.73.0 e incluy\u00e9ndola, es vulnerable a una recursividad no controlada debido a un problema de desbordamiento de la pila en el an\u00e1lisis de coincidencias del comod\u00edn FTP\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-674\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-674\"},{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.21.0\",\"versionEndExcluding\":\"7.74.0\",\"matchCriteriaId\":\"61666FBE-C3B7-4449-89C3-07288182D638\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE996B1-6951-4F85-AA58-B99A379D2163\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3C19813-E823-456A-B1CE-EC0684CE1953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C767AA1-88B7-48F0-9F31-A89D16DCD52C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD7447BC-F315-4298-A822-549942FC118B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:hci_storage_node_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BC4299D-05D3-4875-BC79-C3DC02C88ECE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02DEB4FB-A21D-4CB1-B522-EEE5093E8521\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.14.6\",\"matchCriteriaId\":\"B0E97851-4DFF-4852-A339-183331F4ACBC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.15\",\"versionEndExcluding\":\"10.15.7\",\"matchCriteriaId\":\"DB8A73F8-3074-4B32-B9F6-343B6B1988C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE26ECC-A2C2-4501-9950-510DE0E1BD86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*\",\"matchCriteriaId\":\"26108BEF-0847-4AB0-BD98-35344DFA7835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FD3467D-7679-479F-9C0B-A93F7CD0929D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4C6098E-EDBD-4A85-8282-B2E9D9333872\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*\",\"matchCriteriaId\":\"518BB47B-DD76-4E8C-9F10-7EBC1E146191\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*\",\"matchCriteriaId\":\"63940A55-D851-46EB-9668-D82BEFC1FE95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*\",\"matchCriteriaId\":\"68C7A97A-3801-44FA-96CA-10298FA39883\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D69914D-46C7-4A0E-A075-C863C1692D33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CDB4476-B521-43E4-A129-8718A8E0A8CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"A654B8A2-FC30-4171-B0BB-366CD7ED4B6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1F4BF7F-90D4-4668-B4E6-B06F4070F448\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F441A43-1669-478D-9EC8-E96882DE4F9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1C795B9-E58D-467C-83A8-2D45C792292F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndExcluding\":\"11.3\",\"matchCriteriaId\":\"4E699CCC-31F5-458E-A59C-79B3AF143747\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E39D442D-1997-49AF-8B02-5640BE2A26CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4479F76A-4B67-41CC-98C7-C76B81050F8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"5E63B7B2-409A-476E-BA12-2A2D2F3B85DE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"ADB5D4C9-DA14-4188-9181-17336F9445F6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"90B7CFBF-761C-4EAA-A322-EF5E294AADED\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"E74AAF52-1388-4BD9-B17B-3A6A32CA3608\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"A107698C-9C63-44A9-8A2B-81EDD5702B4C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"0FC0460E-4695-44FB-99EE-28B2C957B760\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"BD54A092-85A7-4459-9C69-19E6E24AC24B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"5F813DBC-BA1E-4C73-AA11-1BD3F9508372\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"416B805F-799A-4466-AC5A-93D083A2ABBD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.0.1.1\",\"matchCriteriaId\":\"B0F46497-4AB0-49A7-9453-CC26837BF253\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.2.0\",\"versionEndExcluding\":\"8.2.12\",\"matchCriteriaId\":\"5722E753-75DE-4944-A11B-556CB299B57D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"9.0.0\",\"versionEndExcluding\":\"9.0.6\",\"matchCriteriaId\":\"DC0F9351-81A4-4FEA-B6B5-6E960A933D32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC\"}]}]}],\"references\":[{\"url\":\"http://seclists.org/fulldisclosure/2021/Apr/51\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://curl.se/docs/CVE-2020-8285.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/curl/curl/issues/6255\",\"source\":\"support@hackerone.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://hackerone.com/reports/1045844\",\"source\":\"support@hackerone.com\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\",\"source\":\"support@hackerone.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202012-14\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210122-0007/\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212325\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212326\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212327\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4881\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2021/Apr/51\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://curl.se/docs/CVE-2020-8285.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/curl/curl/issues/6255\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://hackerone.com/reports/1045844\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\"]},{\"url\":\"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202012-14\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210122-0007/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212325\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212326\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT212327\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4881\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-28T12:01:42+00:00",
"cve": "CVE-2020-8285",
"id": "CVE-2020-8285",
"initial_release_date": "2020-12-09T08:00:00+00:00",
"product_status:fixed": "189",
"product_status:known_affected": "15",
"product_status:known_not_affected": "7",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-8285.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-08-01T23:32:59Z",
"cve": "CVE-2020-8285",
"id": "CVE-2020-8285",
"initial_release_date": "2023-02-15T04:01:21Z",
"product_status:known_affected": "351",
"product_status:known_not_affected": "36",
"product_status:recommended": "431",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2020-8285",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2020-8285.json",
"version": "44"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://hackerone.com/reports/1045844\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/curl/curl/issues/6255\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://curl.se/docs/CVE-2020-8285.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\", \"name\": \"FEDORA-2020-ceaf490686\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\", \"name\": \"[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\", \"name\": \"FEDORA-2020-7ab62c73bc\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202012-14\", \"name\": \"GLSA-202012-14\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4881\", \"name\": \"DSA-4881\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\", \"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2021/Apr/51\", \"name\": \"20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina\", \"tags\": [\"mailing-list\", \"x_refsource_FULLDISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT212325\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT212326\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT212327\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T09:56:28.307Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2020-8285\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-16T14:06:58.616126Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-16T14:06:15.342Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"https://github.com/curl/curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"libcurl 7.21.0 to and including 7.73.0\"}]}], \"references\": [{\"url\": \"https://hackerone.com/reports/1045844\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/curl/curl/issues/6255\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://curl.se/docs/CVE-2020-8285.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\", \"name\": \"FEDORA-2020-ceaf490686\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\", \"name\": \"[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\", \"name\": \"FEDORA-2020-7ab62c73bc\", \"tags\": [\"vendor-advisory\", \"x_refsource_FEDORA\"]}, {\"url\": \"https://security.gentoo.org/glsa/202012-14\", \"name\": \"GLSA-202012-14\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4881\", \"name\": \"DSA-4881\", \"tags\": [\"vendor-advisory\", \"x_refsource_DEBIAN\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2021/Apr/51\", \"name\": \"20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina\", \"tags\": [\"mailing-list\", \"x_refsource_FULLDISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://support.apple.com/kb/HT212325\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://support.apple.com/kb/HT212326\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://support.apple.com/kb/HT212327\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-674\", \"description\": \"Uncontrolled Recursion (CWE-674)\"}]}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2022-04-19T23:23:28.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"libcurl 7.21.0 to and including 7.73.0\"}]}, \"product_name\": \"https://github.com/curl/curl\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://hackerone.com/reports/1045844\", \"name\": \"https://hackerone.com/reports/1045844\", \"refsource\": \"MISC\"}, {\"url\": \"https://github.com/curl/curl/issues/6255\", \"name\": \"https://github.com/curl/curl/issues/6255\", \"refsource\": \"MISC\"}, {\"url\": \"https://curl.se/docs/CVE-2020-8285.html\", \"name\": \"https://curl.se/docs/CVE-2020-8285.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/\", \"name\": \"FEDORA-2020-ceaf490686\", \"refsource\": \"FEDORA\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html\", \"name\": \"[debian-lts-announce] 20201219 [SECURITY] [DLA 2500-1] curl security update\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/\", \"name\": \"FEDORA-2020-7ab62c73bc\", \"refsource\": \"FEDORA\"}, {\"url\": \"https://security.gentoo.org/glsa/202012-14\", \"name\": \"GLSA-202012-14\", \"refsource\": \"GENTOO\"}, {\"url\": \"https://www.debian.org/security/2021/dsa-4881\", \"name\": \"DSA-4881\", \"refsource\": \"DEBIAN\"}, {\"url\": \"http://seclists.org/fulldisclosure/2021/Apr/51\", \"name\": \"20210427 APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina\", \"refsource\": \"FULLDISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuApr2021.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"name\": \"https://security.netapp.com/advisory/ntap-20210122-0007/\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://support.apple.com/kb/HT212325\", \"name\": \"https://support.apple.com/kb/HT212325\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://support.apple.com/kb/HT212326\", \"name\": \"https://support.apple.com/kb/HT212326\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://support.apple.com/kb/HT212327\", \"name\": \"https://support.apple.com/kb/HT212327\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"refsource\": \"MLIST\"}, {\"url\": \"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E\", \"name\": \"[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8\", \"refsource\": \"MLIST\"}, {\"url\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"name\": \"https://www.oracle.com//security-alerts/cpujul2021.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"name\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"name\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\", \"refsource\": \"CONFIRM\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Uncontrolled Recursion (CWE-674)\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2020-8285\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"support@hackerone.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2020-8285\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-16T14:07:21.315Z\", \"dateReserved\": \"2020-01-28T00:00:00.000Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2020-12-14T19:39:04.000Z\", \"assignerShortName\": \"hackerone\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
MSRC_CVE-2020-8285
Vulnerability from csaf_microsoft - Published: 2020-12-02 00:00 - Updated: 2020-12-15 00:00Summary
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
References
4 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2020/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2020/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-8285.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"tracking": {
"current_release_date": "2020-12-15T00:00:00.000Z",
"generator": {
"date": "2025-10-19T18:13:45.020Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2020-8285",
"initial_release_date": "2020-12-02T00:00:00.000Z",
"revision_history": [
{
"date": "2020-12-15T00:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1.0",
"product": {
"name": "CBL Mariner 1.0",
"product_id": "16820"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003ccm1 curl 7.68.0-3",
"product": {
"name": "\u003ccm1 curl 7.68.0-3",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "cm1 curl 7.68.0-3",
"product": {
"name": "cm1 curl 7.68.0-3",
"product_id": "19146"
}
}
],
"category": "product_name",
"name": "curl"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccm1 curl 7.68.0-3 as a component of CBL Mariner 1.0",
"product_id": "16820-1"
},
"product_reference": "1",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cm1 curl 7.68.0-3 as a component of CBL Mariner 1.0",
"product_id": "19146-16820"
},
"product_reference": "19146",
"relates_to_product_reference": "16820"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "general",
"text": "hackerone",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"19146-16820"
],
"known_affected": [
"16820-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-8285.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2020-12-15T00:00:00.000Z",
"details": "7.68.0-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"16820-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"16820-1"
]
}
],
"title": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing."
}
]
}
OPENSUSE-SU-2020:2238-1
Vulnerability from csaf_opensuse - Published: 2020-12-13 05:24 - Updated: 2020-12-13 05:24Summary
Security update for curl
Severity
Moderate
Notes
Title of the patch: Security update for curl
Description of the patch: This update for curl fixes the following issues:
- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593).
- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).
- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames: openSUSE-2020-2238
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
20 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for curl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for curl fixes the following issues:\n\n- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). \n- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).\n- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).\t \n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-2238",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2238-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:2238-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PRXMLUV5IZ4L22JUMUBU3FUW7BWHV7J7/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:2238-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PRXMLUV5IZ4L22JUMUBU3FUW7BWHV7J7/"
},
{
"category": "self",
"summary": "SUSE Bug 1179398",
"url": "https://bugzilla.suse.com/1179398"
},
{
"category": "self",
"summary": "SUSE Bug 1179399",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "self",
"summary": "SUSE Bug 1179593",
"url": "https://bugzilla.suse.com/1179593"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8284 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8285 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8286 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8286/"
}
],
"title": "Security update for curl",
"tracking": {
"current_release_date": "2020-12-13T05:24:33Z",
"generator": {
"date": "2020-12-13T05:24:33Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:2238-1",
"initial_release_date": "2020-12-13T05:24:33Z",
"revision_history": [
{
"date": "2020-12-13T05:24:33Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "curl-7.66.0-lp152.3.12.1.i586",
"product_id": "curl-7.66.0-lp152.3.12.1.i586"
}
},
{
"category": "product_version",
"name": "curl-mini-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "curl-mini-7.66.0-lp152.3.12.1.i586",
"product_id": "curl-mini-7.66.0-lp152.3.12.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "libcurl-devel-7.66.0-lp152.3.12.1.i586",
"product_id": "libcurl-devel-7.66.0-lp152.3.12.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"product_id": "libcurl-mini-devel-7.66.0-lp152.3.12.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "libcurl4-7.66.0-lp152.3.12.1.i586",
"product_id": "libcurl4-7.66.0-lp152.3.12.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"product": {
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"product_id": "libcurl4-mini-7.66.0-lp152.3.12.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "curl-7.66.0-lp152.3.12.1.x86_64",
"product_id": "curl-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "curl-mini-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "curl-mini-7.66.0-lp152.3.12.1.x86_64",
"product_id": "curl-mini-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl-devel-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl4-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl4-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.x86_64",
"product": {
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.x86_64",
"product_id": "libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "curl-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "curl-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-mini-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "curl-mini-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-mini-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "curl-mini-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "libcurl-devel-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "libcurl4-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl4-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.i586 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586"
},
"product_reference": "libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-mini-7.66.0-lp152.3.12.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
},
"product_reference": "libcurl4-mini-7.66.0-lp152.3.12.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8284"
}
],
"notes": [
{
"category": "general",
"text": "A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8284",
"url": "https://www.suse.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "SUSE Bug 1179398 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179398"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-13T05:24:33Z",
"details": "moderate"
}
],
"title": "CVE-2020-8284"
},
{
"cve": "CVE-2020-8285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8285"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8285",
"url": "https://www.suse.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-13T05:24:33Z",
"details": "moderate"
}
],
"title": "CVE-2020-8285"
},
{
"cve": "CVE-2020-8286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8286"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8286",
"url": "https://www.suse.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "SUSE Bug 1179593 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1179593"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:curl-mini-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl-mini-devel-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-32bit-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-7.66.0-lp152.3.12.1.x86_64",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.i586",
"openSUSE Leap 15.2:libcurl4-mini-7.66.0-lp152.3.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-13T05:24:33Z",
"details": "moderate"
}
],
"title": "CVE-2020-8286"
}
]
}
OPENSUSE-SU-2020:2249-1
Vulnerability from csaf_opensuse - Published: 2020-12-14 17:26 - Updated: 2020-12-14 17:26Summary
Security update for curl
Severity
Moderate
Notes
Title of the patch: Security update for curl
Description of the patch: This update for curl fixes the following issues:
- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593).
- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).
- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames: openSUSE-2020-2249
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
20 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for curl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for curl fixes the following issues:\n\n- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). \n- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).\n- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).\t \n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2020-2249",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2249-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2020:2249-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7TJUGEIZONXKJD6DWVYASM2KTYWZ6RI/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2020:2249-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W7TJUGEIZONXKJD6DWVYASM2KTYWZ6RI/"
},
{
"category": "self",
"summary": "SUSE Bug 1179398",
"url": "https://bugzilla.suse.com/1179398"
},
{
"category": "self",
"summary": "SUSE Bug 1179399",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "self",
"summary": "SUSE Bug 1179593",
"url": "https://bugzilla.suse.com/1179593"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8284 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8285 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8286 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8286/"
}
],
"title": "Security update for curl",
"tracking": {
"current_release_date": "2020-12-14T17:26:21Z",
"generator": {
"date": "2020-12-14T17:26:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2020:2249-1",
"initial_release_date": "2020-12-14T17:26:21Z",
"revision_history": [
{
"date": "2020-12-14T17:26:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "curl-7.60.0-lp151.5.18.1.i586",
"product_id": "curl-7.60.0-lp151.5.18.1.i586"
}
},
{
"category": "product_version",
"name": "curl-mini-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "curl-mini-7.60.0-lp151.5.18.1.i586",
"product_id": "curl-mini-7.60.0-lp151.5.18.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "libcurl-devel-7.60.0-lp151.5.18.1.i586",
"product_id": "libcurl-devel-7.60.0-lp151.5.18.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"product_id": "libcurl-mini-devel-7.60.0-lp151.5.18.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "libcurl4-7.60.0-lp151.5.18.1.i586",
"product_id": "libcurl4-7.60.0-lp151.5.18.1.i586"
}
},
{
"category": "product_version",
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"product": {
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"product_id": "libcurl4-mini-7.60.0-lp151.5.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "curl-7.60.0-lp151.5.18.1.x86_64",
"product_id": "curl-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "curl-mini-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "curl-mini-7.60.0-lp151.5.18.1.x86_64",
"product_id": "curl-mini-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl-devel-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl4-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl4-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.x86_64",
"product": {
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.x86_64",
"product_id": "libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "curl-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "curl-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-mini-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "curl-mini-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-mini-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "curl-mini-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "libcurl-devel-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "libcurl4-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl4-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586"
},
"product_reference": "libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-mini-7.60.0-lp151.5.18.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
},
"product_reference": "libcurl4-mini-7.60.0-lp151.5.18.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8284"
}
],
"notes": [
{
"category": "general",
"text": "A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8284",
"url": "https://www.suse.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "SUSE Bug 1179398 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179398"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-14T17:26:21Z",
"details": "moderate"
}
],
"title": "CVE-2020-8284"
},
{
"cve": "CVE-2020-8285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8285"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8285",
"url": "https://www.suse.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-14T17:26:21Z",
"details": "moderate"
}
],
"title": "CVE-2020-8285"
},
{
"cve": "CVE-2020-8286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8286"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8286",
"url": "https://www.suse.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "SUSE Bug 1179593 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1179593"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:curl-mini-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl-mini-devel-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-32bit-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-7.60.0-lp151.5.18.1.x86_64",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.i586",
"openSUSE Leap 15.1:libcurl4-mini-7.60.0-lp151.5.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-12-14T17:26:21Z",
"details": "moderate"
}
],
"title": "CVE-2020-8286"
}
]
}
OPENSUSE-SU-2024:10582-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
curl-7.79.1-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: curl-7.79.1-1.1 on GA media
Description of the patch: These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10582
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.8 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.2 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.1 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
9.1 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
5.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.7 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.4 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
187 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "curl-7.79.1-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10582",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10582-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-1061 page",
"url": "https://www.suse.com/security/cve/CVE-2006-1061/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9586 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9586/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9594 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000099 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000100 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000101 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000254 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-1000257 page",
"url": "https://www.suse.com/security/cve/CVE-2017-1000257/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-2629 page",
"url": "https://www.suse.com/security/cve/CVE-2017-2629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-7468 page",
"url": "https://www.suse.com/security/cve/CVE-2017-7468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-8816 page",
"url": "https://www.suse.com/security/cve/CVE-2017-8816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2017-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2017-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2017-9502 page",
"url": "https://www.suse.com/security/cve/CVE-2017-9502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-0500 page",
"url": "https://www.suse.com/security/cve/CVE-2018-0500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000005 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000005/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000120 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000122 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000300 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000301 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000301/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-14618 page",
"url": "https://www.suse.com/security/cve/CVE-2018-14618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16839 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16840 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16840/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16842 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16890 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-15601 page",
"url": "https://www.suse.com/security/cve/CVE-2019-15601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3822 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-3823 page",
"url": "https://www.suse.com/security/cve/CVE-2019-3823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5435 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5436 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5481 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5481/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-5482 page",
"url": "https://www.suse.com/security/cve/CVE-2019-5482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8169 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8231 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8284 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8284/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8285 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8285/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8286 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8286/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22297 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22298 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22876 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22890 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22898 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22901 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22922 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22924 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22945 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22946 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-22947 page",
"url": "https://www.suse.com/security/cve/CVE-2021-22947/"
}
],
"title": "curl-7.79.1-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10582-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "curl-7.79.1-1.1.aarch64",
"product": {
"name": "curl-7.79.1-1.1.aarch64",
"product_id": "curl-7.79.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.79.1-1.1.aarch64",
"product": {
"name": "libcurl-devel-7.79.1-1.1.aarch64",
"product_id": "libcurl-devel-7.79.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.79.1-1.1.aarch64",
"product": {
"name": "libcurl-devel-32bit-7.79.1-1.1.aarch64",
"product_id": "libcurl-devel-32bit-7.79.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-7.79.1-1.1.aarch64",
"product": {
"name": "libcurl4-7.79.1-1.1.aarch64",
"product_id": "libcurl4-7.79.1-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.79.1-1.1.aarch64",
"product": {
"name": "libcurl4-32bit-7.79.1-1.1.aarch64",
"product_id": "libcurl4-32bit-7.79.1-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-7.79.1-1.1.ppc64le",
"product": {
"name": "curl-7.79.1-1.1.ppc64le",
"product_id": "curl-7.79.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.79.1-1.1.ppc64le",
"product": {
"name": "libcurl-devel-7.79.1-1.1.ppc64le",
"product_id": "libcurl-devel-7.79.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"product": {
"name": "libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"product_id": "libcurl-devel-32bit-7.79.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-7.79.1-1.1.ppc64le",
"product": {
"name": "libcurl4-7.79.1-1.1.ppc64le",
"product_id": "libcurl4-7.79.1-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.79.1-1.1.ppc64le",
"product": {
"name": "libcurl4-32bit-7.79.1-1.1.ppc64le",
"product_id": "libcurl4-32bit-7.79.1-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-7.79.1-1.1.s390x",
"product": {
"name": "curl-7.79.1-1.1.s390x",
"product_id": "curl-7.79.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.79.1-1.1.s390x",
"product": {
"name": "libcurl-devel-7.79.1-1.1.s390x",
"product_id": "libcurl-devel-7.79.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.79.1-1.1.s390x",
"product": {
"name": "libcurl-devel-32bit-7.79.1-1.1.s390x",
"product_id": "libcurl-devel-32bit-7.79.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-7.79.1-1.1.s390x",
"product": {
"name": "libcurl4-7.79.1-1.1.s390x",
"product_id": "libcurl4-7.79.1-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.79.1-1.1.s390x",
"product": {
"name": "libcurl4-32bit-7.79.1-1.1.s390x",
"product_id": "libcurl4-32bit-7.79.1-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-7.79.1-1.1.x86_64",
"product": {
"name": "curl-7.79.1-1.1.x86_64",
"product_id": "curl-7.79.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-7.79.1-1.1.x86_64",
"product": {
"name": "libcurl-devel-7.79.1-1.1.x86_64",
"product_id": "libcurl-devel-7.79.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl-devel-32bit-7.79.1-1.1.x86_64",
"product": {
"name": "libcurl-devel-32bit-7.79.1-1.1.x86_64",
"product_id": "libcurl-devel-32bit-7.79.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-7.79.1-1.1.x86_64",
"product": {
"name": "libcurl4-7.79.1-1.1.x86_64",
"product_id": "libcurl4-7.79.1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libcurl4-32bit-7.79.1-1.1.x86_64",
"product": {
"name": "libcurl4-32bit-7.79.1-1.1.x86_64",
"product_id": "libcurl4-32bit-7.79.1-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.79.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64"
},
"product_reference": "curl-7.79.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.79.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le"
},
"product_reference": "curl-7.79.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.79.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-7.79.1-1.1.s390x"
},
"product_reference": "curl-7.79.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-7.79.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64"
},
"product_reference": "curl-7.79.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.79.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64"
},
"product_reference": "libcurl-devel-7.79.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.79.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le"
},
"product_reference": "libcurl-devel-7.79.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.79.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x"
},
"product_reference": "libcurl-devel-7.79.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-7.79.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64"
},
"product_reference": "libcurl-devel-7.79.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.79.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64"
},
"product_reference": "libcurl-devel-32bit-7.79.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.79.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le"
},
"product_reference": "libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.79.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x"
},
"product_reference": "libcurl-devel-32bit-7.79.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-32bit-7.79.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64"
},
"product_reference": "libcurl-devel-32bit-7.79.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.79.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64"
},
"product_reference": "libcurl4-7.79.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.79.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le"
},
"product_reference": "libcurl4-7.79.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.79.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x"
},
"product_reference": "libcurl4-7.79.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-7.79.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
},
"product_reference": "libcurl4-7.79.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.79.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64"
},
"product_reference": "libcurl4-32bit-7.79.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.79.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le"
},
"product_reference": "libcurl4-32bit-7.79.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.79.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x"
},
"product_reference": "libcurl4-32bit-7.79.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl4-32bit-7.79.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64"
},
"product_reference": "libcurl4-32bit-7.79.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-1061",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-1061"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-1061",
"url": "https://www.suse.com/security/cve/CVE-2006-1061"
},
{
"category": "external",
"summary": "SUSE Bug 157874 for CVE-2006-1061",
"url": "https://bugzilla.suse.com/157874"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2006-1061"
},
{
"cve": "CVE-2016-9586",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9586"
}
],
"notes": [
{
"category": "general",
"text": "curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl\u0027s implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9586",
"url": "https://www.suse.com/security/cve/CVE-2016-9586"
},
{
"category": "external",
"summary": "SUSE Bug 1015332 for CVE-2016-9586",
"url": "https://bugzilla.suse.com/1015332"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9586"
},
{
"cve": "CVE-2016-9594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9594"
}
],
"notes": [
{
"category": "general",
"text": "curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl\u0027s internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9594",
"url": "https://www.suse.com/security/cve/CVE-2016-9594"
},
{
"category": "external",
"summary": "SUSE Bug 1016738 for CVE-2016-9594",
"url": "https://bugzilla.suse.com/1016738"
},
{
"category": "external",
"summary": "SUSE Bug 1017161 for CVE-2016-9594",
"url": "https://bugzilla.suse.com/1017161"
},
{
"category": "external",
"summary": "SUSE Bug 1042181 for CVE-2016-9594",
"url": "https://bugzilla.suse.com/1042181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-9594"
},
{
"cve": "CVE-2017-1000099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000099"
}
],
"notes": [
{
"category": "general",
"text": "When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application\u0027s provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000099",
"url": "https://www.suse.com/security/cve/CVE-2017-1000099"
},
{
"category": "external",
"summary": "SUSE Bug 1051645 for CVE-2017-1000099",
"url": "https://bugzilla.suse.com/1051645"
},
{
"category": "external",
"summary": "SUSE Bug 1053919 for CVE-2017-1000099",
"url": "https://bugzilla.suse.com/1053919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000099"
},
{
"cve": "CVE-2017-1000100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000100"
}
],
"notes": [
{
"category": "general",
"text": "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn\u0027t restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl\u0027s redirect protocols with --proto-redir and libcurl\u0027s with CURLOPT_REDIR_PROTOCOLS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000100",
"url": "https://www.suse.com/security/cve/CVE-2017-1000100"
},
{
"category": "external",
"summary": "SUSE Bug 1051644 for CVE-2017-1000100",
"url": "https://bugzilla.suse.com/1051644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-1000100"
},
{
"cve": "CVE-2017-1000101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000101"
}
],
"notes": [
{
"category": "general",
"text": "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000101",
"url": "https://www.suse.com/security/cve/CVE-2017-1000101"
},
{
"category": "external",
"summary": "SUSE Bug 1051643 for CVE-2017-1000101",
"url": "https://bugzilla.suse.com/1051643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000101"
},
{
"cve": "CVE-2017-1000254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000254"
}
],
"notes": [
{
"category": "general",
"text": "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000254",
"url": "https://www.suse.com/security/cve/CVE-2017-1000254"
},
{
"category": "external",
"summary": "SUSE Bug 1061876 for CVE-2017-1000254",
"url": "https://bugzilla.suse.com/1061876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-1000254"
},
{
"cve": "CVE-2017-1000257",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-1000257"
}
],
"notes": [
{
"category": "general",
"text": "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl\u0027s deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-1000257",
"url": "https://www.suse.com/security/cve/CVE-2017-1000257"
},
{
"category": "external",
"summary": "SUSE Bug 1063824 for CVE-2017-1000257",
"url": "https://bugzilla.suse.com/1063824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-1000257"
},
{
"cve": "CVE-2017-2629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-2629"
}
],
"notes": [
{
"category": "general",
"text": "curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server\u0027s certificate\u0027s validity in the code that checks for a test success or failure. It ends up always thinking there\u0027s valid proof, even when there is none or if the server doesn\u0027t support the TLS extension in question. This could lead to users not detecting when a server\u0027s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-2629",
"url": "https://www.suse.com/security/cve/CVE-2017-2629"
},
{
"category": "external",
"summary": "SUSE Bug 1025379 for CVE-2017-2629",
"url": "https://bugzilla.suse.com/1025379"
},
{
"category": "external",
"summary": "SUSE Bug 1042181 for CVE-2017-2629",
"url": "https://bugzilla.suse.com/1042181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-2629"
},
{
"cve": "CVE-2017-7468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-7468"
}
],
"notes": [
{
"category": "general",
"text": "In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate). libcurl supports by default the use of TLS session id/ticket to resume previous TLS sessions to speed up subsequent TLS handshakes. They are used when for any reason an existing TLS connection couldn\u0027t be kept alive to make the next handshake faster. This flaw is a regression and identical to CVE-2016-5419 reported on August 3rd 2016, but affecting a different version range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-7468",
"url": "https://www.suse.com/security/cve/CVE-2017-7468"
},
{
"category": "external",
"summary": "SUSE Bug 1033413 for CVE-2017-7468",
"url": "https://bugzilla.suse.com/1033413"
},
{
"category": "external",
"summary": "SUSE Bug 1033442 for CVE-2017-7468",
"url": "https://bugzilla.suse.com/1033442"
},
{
"category": "external",
"summary": "SUSE Bug 1042181 for CVE-2017-7468",
"url": "https://bugzilla.suse.com/1042181"
},
{
"category": "external",
"summary": "SUSE Bug 991389 for CVE-2017-7468",
"url": "https://bugzilla.suse.com/991389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2017-7468"
},
{
"cve": "CVE-2017-8816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-8816"
}
],
"notes": [
{
"category": "general",
"text": "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-8816",
"url": "https://www.suse.com/security/cve/CVE-2017-8816"
},
{
"category": "external",
"summary": "SUSE Bug 1069226 for CVE-2017-8816",
"url": "https://bugzilla.suse.com/1069226"
},
{
"category": "external",
"summary": "SUSE Bug 1106019 for CVE-2017-8816",
"url": "https://bugzilla.suse.com/1106019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-8816"
},
{
"cve": "CVE-2017-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-8817"
}
],
"notes": [
{
"category": "general",
"text": "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an \u0027[\u0027 character.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-8817",
"url": "https://www.suse.com/security/cve/CVE-2017-8817"
},
{
"category": "external",
"summary": "SUSE Bug 1069222 for CVE-2017-8817",
"url": "https://bugzilla.suse.com/1069222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-8817"
},
{
"cve": "CVE-2017-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-8818"
}
],
"notes": [
{
"category": "general",
"text": "curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-8818",
"url": "https://www.suse.com/security/cve/CVE-2017-8818"
},
{
"category": "external",
"summary": "SUSE Bug 1069714 for CVE-2017-8818",
"url": "https://bugzilla.suse.com/1069714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2017-8818"
},
{
"cve": "CVE-2017-9502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2017-9502"
}
],
"notes": [
{
"category": "general",
"text": "In curl before 7.54.1 on Windows and DOS, libcurl\u0027s default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL without a scheme part, had a flaw that could lead to it overwriting a heap based memory buffer with seven bytes. If the default protocol is specified to be FILE or a file: URL lacks two slashes, the given \"URL\" starts with a drive letter, and libcurl is built for Windows or DOS, then libcurl would copy the path 7 bytes off, so that the end of the given path would write beyond the malloc buffer (7 bytes being the length in bytes of the ascii string \"file://\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2017-9502",
"url": "https://www.suse.com/security/cve/CVE-2017-9502"
},
{
"category": "external",
"summary": "SUSE Bug 1044243 for CVE-2017-9502",
"url": "https://bugzilla.suse.com/1044243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2017-9502"
},
{
"cve": "CVE-2018-0500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-0500"
}
],
"notes": [
{
"category": "general",
"text": "Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-0500",
"url": "https://www.suse.com/security/cve/CVE-2018-0500"
},
{
"category": "external",
"summary": "SUSE Bug 1099793 for CVE-2018-0500",
"url": "https://bugzilla.suse.com/1099793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2018-0500"
},
{
"cve": "CVE-2018-1000005",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000005"
}
],
"notes": [
{
"category": "general",
"text": "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn\u0027t updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000005",
"url": "https://www.suse.com/security/cve/CVE-2018-1000005"
},
{
"category": "external",
"summary": "SUSE Bug 1076360 for CVE-2018-1000005",
"url": "https://bugzilla.suse.com/1076360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-1000005"
},
{
"cve": "CVE-2018-1000120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000120"
}
],
"notes": [
{
"category": "general",
"text": "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000120",
"url": "https://www.suse.com/security/cve/CVE-2018-1000120"
},
{
"category": "external",
"summary": "SUSE Bug 1084521 for CVE-2018-1000120",
"url": "https://bugzilla.suse.com/1084521"
},
{
"category": "external",
"summary": "SUSE Bug 1101811 for CVE-2018-1000120",
"url": "https://bugzilla.suse.com/1101811"
},
{
"category": "external",
"summary": "SUSE Bug 1112526 for CVE-2018-1000120",
"url": "https://bugzilla.suse.com/1112526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000120"
},
{
"cve": "CVE-2018-1000122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000122"
}
],
"notes": [
{
"category": "general",
"text": "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000122",
"url": "https://www.suse.com/security/cve/CVE-2018-1000122"
},
{
"category": "external",
"summary": "SUSE Bug 1084532 for CVE-2018-1000122",
"url": "https://bugzilla.suse.com/1084532"
},
{
"category": "external",
"summary": "SUSE Bug 1101811 for CVE-2018-1000122",
"url": "https://bugzilla.suse.com/1101811"
},
{
"category": "external",
"summary": "SUSE Bug 1112526 for CVE-2018-1000122",
"url": "https://bugzilla.suse.com/1112526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000122"
},
{
"cve": "CVE-2018-1000300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000300"
}
],
"notes": [
{
"category": "general",
"text": "curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl \u003c 7.54.1 and curl \u003e= 7.60.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000300",
"url": "https://www.suse.com/security/cve/CVE-2018-1000300"
},
{
"category": "external",
"summary": "SUSE Bug 1092094 for CVE-2018-1000300",
"url": "https://bugzilla.suse.com/1092094"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-1000300"
},
{
"cve": "CVE-2018-1000301",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000301"
}
],
"notes": [
{
"category": "general",
"text": "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000301",
"url": "https://www.suse.com/security/cve/CVE-2018-1000301"
},
{
"category": "external",
"summary": "SUSE Bug 1092098 for CVE-2018-1000301",
"url": "https://bugzilla.suse.com/1092098"
},
{
"category": "external",
"summary": "SUSE Bug 1122464 for CVE-2018-1000301",
"url": "https://bugzilla.suse.com/1122464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2018-1000301"
},
{
"cve": "CVE-2018-14618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-14618"
}
],
"notes": [
{
"category": "general",
"text": "curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-14618",
"url": "https://www.suse.com/security/cve/CVE-2018-14618"
},
{
"category": "external",
"summary": "SUSE Bug 1106019 for CVE-2018-14618",
"url": "https://bugzilla.suse.com/1106019"
},
{
"category": "external",
"summary": "SUSE Bug 1112758 for CVE-2018-14618",
"url": "https://bugzilla.suse.com/1112758"
},
{
"category": "external",
"summary": "SUSE Bug 1122464 for CVE-2018-14618",
"url": "https://bugzilla.suse.com/1122464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-14618"
},
{
"cve": "CVE-2018-16839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16839"
}
],
"notes": [
{
"category": "general",
"text": "Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16839",
"url": "https://www.suse.com/security/cve/CVE-2018-16839"
},
{
"category": "external",
"summary": "SUSE Bug 1112758 for CVE-2018-16839",
"url": "https://bugzilla.suse.com/1112758"
},
{
"category": "external",
"summary": "SUSE Bug 1113029 for CVE-2018-16839",
"url": "https://bugzilla.suse.com/1113029"
},
{
"category": "external",
"summary": "SUSE Bug 1131886 for CVE-2018-16839",
"url": "https://bugzilla.suse.com/1131886"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16839"
},
{
"cve": "CVE-2018-16840",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16840"
}
],
"notes": [
{
"category": "general",
"text": "A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an \u0027easy\u0027 handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16840",
"url": "https://www.suse.com/security/cve/CVE-2018-16840"
},
{
"category": "external",
"summary": "SUSE Bug 1112758 for CVE-2018-16840",
"url": "https://bugzilla.suse.com/1112758"
},
{
"category": "external",
"summary": "SUSE Bug 1113029 for CVE-2018-16840",
"url": "https://bugzilla.suse.com/1113029"
},
{
"category": "external",
"summary": "SUSE Bug 1122464 for CVE-2018-16840",
"url": "https://bugzilla.suse.com/1122464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16840"
},
{
"cve": "CVE-2018-16842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16842"
}
],
"notes": [
{
"category": "general",
"text": "Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16842",
"url": "https://www.suse.com/security/cve/CVE-2018-16842"
},
{
"category": "external",
"summary": "SUSE Bug 1113660 for CVE-2018-16842",
"url": "https://bugzilla.suse.com/1113660"
},
{
"category": "external",
"summary": "SUSE Bug 1122464 for CVE-2018-16842",
"url": "https://bugzilla.suse.com/1122464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16842"
},
{
"cve": "CVE-2018-16890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16890"
}
],
"notes": [
{
"category": "general",
"text": "libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16890",
"url": "https://www.suse.com/security/cve/CVE-2018-16890"
},
{
"category": "external",
"summary": "SUSE Bug 1123371 for CVE-2018-16890",
"url": "https://bugzilla.suse.com/1123371"
},
{
"category": "external",
"summary": "SUSE Bug 1123378 for CVE-2018-16890",
"url": "https://bugzilla.suse.com/1123378"
},
{
"category": "external",
"summary": "SUSE Bug 1141798 for CVE-2018-16890",
"url": "https://bugzilla.suse.com/1141798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-16890"
},
{
"cve": "CVE-2019-15601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-15601"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-15601",
"url": "https://www.suse.com/security/cve/CVE-2019-15601"
},
{
"category": "external",
"summary": "SUSE Bug 1160301 for CVE-2019-15601",
"url": "https://bugzilla.suse.com/1160301"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-15601"
},
{
"cve": "CVE-2019-3822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3822"
}
],
"notes": [
{
"category": "general",
"text": "libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received data. The check that exists to prevent the local buffer from getting overflowed is implemented wrongly (using unsigned math) and as such it does not prevent the overflow from happening. This output data can grow larger than the local buffer if very large \u0027nt response\u0027 data is extracted from a previous NTLMv2 header provided by the malicious or broken HTTP server. Such a \u0027large value\u0027 needs to be around 1000 bytes or more. The actual payload data copied to the target buffer comes from the NTLMv2 type-2 response header.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3822",
"url": "https://www.suse.com/security/cve/CVE-2019-3822"
},
{
"category": "external",
"summary": "SUSE Bug 1123377 for CVE-2019-3822",
"url": "https://bugzilla.suse.com/1123377"
},
{
"category": "external",
"summary": "SUSE Bug 1141798 for CVE-2019-3822",
"url": "https://bugzilla.suse.com/1141798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-3822"
},
{
"cve": "CVE-2019-3823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-3823"
}
],
"notes": [
{
"category": "general",
"text": "libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn\u0027t NUL terminated and contains no character ending the parsed number, and `len` is set to 5, then the `strtol()` call reads beyond the allocated buffer. The read contents will not be returned to the caller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-3823",
"url": "https://www.suse.com/security/cve/CVE-2019-3823"
},
{
"category": "external",
"summary": "SUSE Bug 1123378 for CVE-2019-3823",
"url": "https://bugzilla.suse.com/1123378"
},
{
"category": "external",
"summary": "SUSE Bug 1126909 for CVE-2019-3823",
"url": "https://bugzilla.suse.com/1126909"
},
{
"category": "external",
"summary": "SUSE Bug 1141798 for CVE-2019-3823",
"url": "https://bugzilla.suse.com/1141798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-3823"
},
{
"cve": "CVE-2019-5435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5435"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in curl\u0027s URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5435",
"url": "https://www.suse.com/security/cve/CVE-2019-5435"
},
{
"category": "external",
"summary": "SUSE Bug 1135176 for CVE-2019-5435",
"url": "https://bugzilla.suse.com/1135176"
},
{
"category": "external",
"summary": "SUSE Bug 1154162 for CVE-2019-5435",
"url": "https://bugzilla.suse.com/1154162"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5435"
},
{
"cve": "CVE-2019-5436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5436"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5436",
"url": "https://www.suse.com/security/cve/CVE-2019-5436"
},
{
"category": "external",
"summary": "SUSE Bug 1135170 for CVE-2019-5436",
"url": "https://bugzilla.suse.com/1135170"
},
{
"category": "external",
"summary": "SUSE Bug 1149496 for CVE-2019-5436",
"url": "https://bugzilla.suse.com/1149496"
},
{
"category": "external",
"summary": "SUSE Bug 1154162 for CVE-2019-5436",
"url": "https://bugzilla.suse.com/1154162"
},
{
"category": "external",
"summary": "SUSE Bug 1167096 for CVE-2019-5436",
"url": "https://bugzilla.suse.com/1167096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5436"
},
{
"cve": "CVE-2019-5481",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5481"
}
],
"notes": [
{
"category": "general",
"text": "Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5481",
"url": "https://www.suse.com/security/cve/CVE-2019-5481"
},
{
"category": "external",
"summary": "SUSE Bug 1149495 for CVE-2019-5481",
"url": "https://bugzilla.suse.com/1149495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-5481"
},
{
"cve": "CVE-2019-5482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-5482"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-5482",
"url": "https://www.suse.com/security/cve/CVE-2019-5482"
},
{
"category": "external",
"summary": "SUSE Bug 1149496 for CVE-2019-5482",
"url": "https://bugzilla.suse.com/1149496"
},
{
"category": "external",
"summary": "SUSE Bug 1156634 for CVE-2019-5482",
"url": "https://bugzilla.suse.com/1156634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-5482"
},
{
"cve": "CVE-2020-8169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8169"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8169",
"url": "https://www.suse.com/security/cve/CVE-2020-8169"
},
{
"category": "external",
"summary": "SUSE Bug 1173026 for CVE-2020-8169",
"url": "https://bugzilla.suse.com/1173026"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8169",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8169"
},
{
"cve": "CVE-2020-8231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8231"
}
],
"notes": [
{
"category": "general",
"text": "Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8231",
"url": "https://www.suse.com/security/cve/CVE-2020-8231"
},
{
"category": "external",
"summary": "SUSE Bug 1175109 for CVE-2020-8231",
"url": "https://bugzilla.suse.com/1175109"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8231",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8231",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2020-8231"
},
{
"cve": "CVE-2020-8284",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8284"
}
],
"notes": [
{
"category": "general",
"text": "A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8284",
"url": "https://www.suse.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "SUSE Bug 1179398 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179398"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8284",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8284"
},
{
"cve": "CVE-2020-8285",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8285"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8285",
"url": "https://www.suse.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "SUSE Bug 1179399 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1179399"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8285",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8285"
},
{
"cve": "CVE-2020-8286",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8286"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8286",
"url": "https://www.suse.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "SUSE Bug 1179593 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1179593"
},
{
"category": "external",
"summary": "SUSE Bug 1186108 for CVE-2020-8286",
"url": "https://bugzilla.suse.com/1186108"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8286"
},
{
"cve": "CVE-2021-22297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22297"
}
],
"notes": [
{
"category": "general",
"text": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22297",
"url": "https://www.suse.com/security/cve/CVE-2021-22297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22297"
},
{
"cve": "CVE-2021-22298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22298"
}
],
"notes": [
{
"category": "general",
"text": "There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22298",
"url": "https://www.suse.com/security/cve/CVE-2021-22298"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22298"
},
{
"cve": "CVE-2021-22876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22876"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22876",
"url": "https://www.suse.com/security/cve/CVE-2021-22876"
},
{
"category": "external",
"summary": "SUSE Bug 1183933 for CVE-2021-22876",
"url": "https://bugzilla.suse.com/1183933"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22876"
},
{
"cve": "CVE-2021-22890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22890"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote server and then wrongly \"short-cut\" the host handshake. When confusing the tickets, a HTTPS proxy can trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to work - unless curl has been told to ignore the server certificate check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22890",
"url": "https://www.suse.com/security/cve/CVE-2021-22890"
},
{
"category": "external",
"summary": "SUSE Bug 1183934 for CVE-2021-22890",
"url": "https://bugzilla.suse.com/1183934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2021-22890"
},
{
"cve": "CVE-2021-22898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22898"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22898",
"url": "https://www.suse.com/security/cve/CVE-2021-22898"
},
{
"category": "external",
"summary": "SUSE Bug 1186114 for CVE-2021-22898",
"url": "https://bugzilla.suse.com/1186114"
},
{
"category": "external",
"summary": "SUSE Bug 1192450 for CVE-2021-22898",
"url": "https://bugzilla.suse.com/1192450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22898"
},
{
"cve": "CVE-2021-22901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22901"
}
],
"notes": [
{
"category": "general",
"text": "curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP/1.1 connection or multiplexed HTTP/2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22901",
"url": "https://www.suse.com/security/cve/CVE-2021-22901"
},
{
"category": "external",
"summary": "SUSE Bug 1186115 for CVE-2021-22901",
"url": "https://bugzilla.suse.com/1186115"
},
{
"category": "external",
"summary": "SUSE Bug 1188549 for CVE-2021-22901",
"url": "https://bugzilla.suse.com/1188549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-22901"
},
{
"cve": "CVE-2021-22922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22922"
}
],
"notes": [
{
"category": "general",
"text": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22922",
"url": "https://www.suse.com/security/cve/CVE-2021-22922"
},
{
"category": "external",
"summary": "SUSE Bug 1188217 for CVE-2021-22922",
"url": "https://bugzilla.suse.com/1188217"
},
{
"category": "external",
"summary": "SUSE Bug 1192447 for CVE-2021-22922",
"url": "https://bugzilla.suse.com/1192447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22922"
},
{
"cve": "CVE-2021-22924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22924"
}
],
"notes": [
{
"category": "general",
"text": "libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take \u0027issuercert\u0027 into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn\u0027t include the \u0027issuer cert\u0027 which a transfer can setto qualify how to verify the server certificate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22924",
"url": "https://www.suse.com/security/cve/CVE-2021-22924"
},
{
"category": "external",
"summary": "SUSE Bug 1188219 for CVE-2021-22924",
"url": "https://bugzilla.suse.com/1188219"
},
{
"category": "external",
"summary": "SUSE Bug 1192447 for CVE-2021-22924",
"url": "https://bugzilla.suse.com/1192447"
},
{
"category": "external",
"summary": "SUSE Bug 1200196 for CVE-2021-22924",
"url": "https://bugzilla.suse.com/1200196"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22924"
},
{
"cve": "CVE-2021-22945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22945"
}
],
"notes": [
{
"category": "general",
"text": "When sending data to an MQTT server, libcurl \u003c= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22945",
"url": "https://www.suse.com/security/cve/CVE-2021-22945"
},
{
"category": "external",
"summary": "SUSE Bug 1190213 for CVE-2021-22945",
"url": "https://bugzilla.suse.com/1190213"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22945"
},
{
"cve": "CVE-2021-22946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22946"
}
],
"notes": [
{
"category": "general",
"text": "A user can tell curl \u003e= 7.20.0 and \u003c= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22946",
"url": "https://www.suse.com/security/cve/CVE-2021-22946"
},
{
"category": "external",
"summary": "SUSE Bug 1190373 for CVE-2021-22946",
"url": "https://bugzilla.suse.com/1190373"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-22946",
"url": "https://bugzilla.suse.com/1194948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22946"
},
{
"cve": "CVE-2021-22947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-22947"
}
],
"notes": [
{
"category": "general",
"text": "When curl \u003e= 7.20.0 and \u003c= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker\u0027s injected data comes from the TLS-protected server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-22947",
"url": "https://www.suse.com/security/cve/CVE-2021-22947"
},
{
"category": "external",
"summary": "SUSE Bug 1190374 for CVE-2021-22947",
"url": "https://bugzilla.suse.com/1190374"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:curl-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:curl-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:curl-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:curl-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl-devel-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-32bit-7.79.1-1.1.x86_64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.aarch64",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.ppc64le",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.s390x",
"openSUSE Tumbleweed:libcurl4-7.79.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-22947"
}
]
}
RHSA-2021:1610
Vulnerability from csaf_redhat - Published: 2021-05-18 15:28 - Updated: 2026-06-28 12:34Summary
Red Hat Security Advisory: curl security and bug fix update
Severity
Moderate
Notes
Topic: An update for curl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl from versions 7.29.0 through 7.71.1. An application that performs multiple requests with libcurl's multi API, and sets the `CURLOPT_CONNECT_ONLY` option, might experience libcurl using the wrong connection. The highest threat from this vulnerability is to data confidentiality.
CWE-822 - Untrusted Pointer DereferenceAffected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
31 references
Acknowledgments
the Curl project
Marc Aldorasi
Varnavas Papaioannou
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for curl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.\n\nSecurity Fix(es):\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:1610",
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/"
},
{
"category": "external",
"summary": "1868032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868032"
},
{
"category": "external",
"summary": "1873327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1873327"
},
{
"category": "external",
"summary": "1895391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895391"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1918692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918692"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1610.json"
}
],
"title": "Red Hat Security Advisory: curl security and bug fix update",
"tracking": {
"current_release_date": "2026-06-28T12:34:24+00:00",
"generator": {
"date": "2026-06-28T12:34:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.2.6"
}
},
"id": "RHSA-2021:1610",
"initial_release_date": "2021-05-18T15:28:08+00:00",
"revision_history": [
{
"date": "2021-05-18T15:28:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-05-18T15:28:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-28T12:34:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.src",
"product": {
"name": "curl-0:7.61.1-18.el8.src",
"product_id": "curl-0:7.61.1-18.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-0:7.61.1-18.el8.aarch64",
"product_id": "curl-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product_id": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-0:7.61.1-18.el8.x86_64",
"product_id": "curl-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product_id": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-0:7.61.1-18.el8.i686",
"product_id": "libcurl-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.i686",
"product_id": "libcurl-devel-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.i686",
"product_id": "curl-debugsource-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-0:7.61.1-18.el8.s390x",
"product_id": "curl-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product_id": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src"
},
"product_reference": "curl-0:7.61.1-18.el8.src",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Marc Aldorasi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-8231",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"discovery_date": "2020-08-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868032"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl from versions 7.29.0 through 7.71.1. An application that performs multiple requests with libcurl\u0027s multi API, and sets the `CURLOPT_CONNECT_ONLY` option, might experience libcurl using the wrong connection. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8231"
},
{
"category": "external",
"summary": "RHBZ#1868032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868032"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8231",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8231"
}
],
"release_date": "2020-08-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
}
]
}
RHSA-2021:2471
Vulnerability from csaf_redhat - Published: 2021-06-17 11:35 - Updated: 2026-08-04 11:47Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
Severity
Important
Notes
Topic: Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 8 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)
* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)
* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)
* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.
CWE-290 - Authentication Bypass by SpoofingAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
49 references
Acknowledgments
Varnavas Papaioannou
the Curl project
Viktor Szakats
Facebook
Mingtao Yang
Harry Sintonen
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 8 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)\n\n* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)\n\n* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)\n\n* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:2471",
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1g",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1g"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/"
},
{
"category": "external",
"summary": "1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "1968013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968013"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2471.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update",
"tracking": {
"current_release_date": "2026-08-04T11:47:51+00:00",
"generator": {
"date": "2026-08-04T11:47:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2021:2471",
"initial_release_date": "2021-06-17T11:35:19+00:00",
"revision_history": [
{
"date": "2021-06-17T11:35:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-06-17T11:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-04T11:47:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product": {
"name": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product_id": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8169",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847916"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: partial password leak over DNS on HTTP redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8169"
},
{
"category": "external",
"summary": "RHBZ#1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8169",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8169.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8169.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: partial password leak over DNS on HTTP redirect"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Viktor Szakats"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22876",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941964"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Leak of authentication credentials in URL via automatic Referer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22876"
},
{
"category": "external",
"summary": "RHBZ#1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "This issue can be avoided by using at least one of the following recommendations:\n\n* Do not enable automatic generation of Referer headers when redirects are followed. This functionality is not enabled by default. In the curl command line tool, it is enabled using the -e \u0027;auto\u0027 or --referer \u0027;auto\u0027 command line options. In the libcurl library, it is enabled using the CURLOPT_AUTOREFERER option.\n\n* Do not include authentication credentials in URLs (in the form of https://username:password@example.com), use other methods to provide authentication credentials to curl / libcurl. For the curl command line tool, use -u or --user command line option. For the libcurl library, use CURLOPT_USERPWD or CURLOPT_USERNAME / CURLOPT_PASSWORD options.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Leak of authentication credentials in URL via automatic Referer"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Mingtao Yang"
],
"organization": "Facebook",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22890",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22890"
},
{
"category": "external",
"summary": "RHBZ#1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22890",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22890.html",
"url": "https://curl.se/docs/CVE-2021-22890.html"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Harry Sintonen"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1963146"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22901"
},
{
"category": "external",
"summary": "RHBZ#1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22901.html",
"url": "https://curl.se/docs/CVE-2021-22901.html"
}
],
"release_date": "2021-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend"
}
]
}
RHSA-2021:2472
Vulnerability from csaf_redhat - Published: 2021-06-17 11:47 - Updated: 2026-08-04 11:47Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
Severity
Important
Notes
Topic: Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)
* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)
* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)
* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.
5.9 (Medium)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.
CWE-290 - Authentication Bypass by SpoofingAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.
8.1 (High)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
46 references
Acknowledgments
Varnavas Papaioannou
the Curl project
Viktor Szakats
Facebook
Mingtao Yang
Harry Sintonen
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)\n\n* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)\n\n* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)\n\n* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:2472",
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "1968013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968013"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2472.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update",
"tracking": {
"current_release_date": "2026-08-04T11:47:52+00:00",
"generator": {
"date": "2026-08-04T11:47:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2021:2472",
"initial_release_date": "2021-06-17T11:47:39+00:00",
"revision_history": [
{
"date": "2021-06-17T11:47:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-06-17T11:47:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-04T11:47:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 8",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product_id": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-16.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product_id": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-37.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-6.el8jbcs?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-5.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-20.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product_id": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.el8jbcs?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-16.redhat_1.el8jbcs?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-runtime@1-18.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-74.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-74.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-36.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.16-5.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-63.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs-debuginfo@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-5.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-5.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-20.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-20.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-runtime@1-18.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-debuginfo@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-17.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-36.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.16-5.Final_redhat_2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-63.GA.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-74.jbcs.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-74.el8jbcs?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-0:1-18.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8169",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847916"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: partial password leak over DNS on HTTP redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8169"
},
{
"category": "external",
"summary": "RHBZ#1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8169",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8169.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8169.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: partial password leak over DNS on HTTP redirect"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Viktor Szakats"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22876",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941964"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Leak of authentication credentials in URL via automatic Referer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22876"
},
{
"category": "external",
"summary": "RHBZ#1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "This issue can be avoided by using at least one of the following recommendations:\n\n* Do not enable automatic generation of Referer headers when redirects are followed. This functionality is not enabled by default. In the curl command line tool, it is enabled using the -e \u0027;auto\u0027 or --referer \u0027;auto\u0027 command line options. In the libcurl library, it is enabled using the CURLOPT_AUTOREFERER option.\n\n* Do not include authentication credentials in URLs (in the form of https://username:password@example.com), use other methods to provide authentication credentials to curl / libcurl. For the curl command line tool, use -u or --user command line option. For the libcurl library, use CURLOPT_USERPWD or CURLOPT_USERNAME / CURLOPT_PASSWORD options.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Leak of authentication credentials in URL via automatic Referer"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Mingtao Yang"
],
"organization": "Facebook",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22890",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22890"
},
{
"category": "external",
"summary": "RHBZ#1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22890",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22890.html",
"url": "https://curl.se/docs/CVE-2021-22890.html"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Harry Sintonen"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1963146"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22901"
},
{
"category": "external",
"summary": "RHBZ#1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22901.html",
"url": "https://curl.se/docs/CVE-2021-22901.html"
}
],
"release_date": "2021-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend"
}
]
}
RHSA-2021_1610
Vulnerability from csaf_redhat - Published: 2021-05-18 15:28 - Updated: 2024-11-22 15:55Summary
Red Hat Security Advisory: curl security and bug fix update
Severity
Moderate
Notes
Topic: An update for curl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.
Security Fix(es):
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl from versions 7.29.0 through 7.71.1. An application that performs multiple requests with libcurl's multi API, and sets the `CURLOPT_CONNECT_ONLY` option, might experience libcurl using the wrong connection. The highest threat from this vulnerability is to data confidentiality.
CWE-822 - Untrusted Pointer DereferenceAffected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
31 references
Acknowledgments
the Curl project
Marc Aldorasi
Varnavas Papaioannou
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for curl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.\n\nSecurity Fix(es):\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:1610",
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/"
},
{
"category": "external",
"summary": "1868032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868032"
},
{
"category": "external",
"summary": "1873327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1873327"
},
{
"category": "external",
"summary": "1895391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1895391"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1918692",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918692"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1610.json"
}
],
"title": "Red Hat Security Advisory: curl security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T15:55:43+00:00",
"generator": {
"date": "2024-11-22T15:55:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2021:1610",
"initial_release_date": "2021-05-18T15:28:08+00:00",
"revision_history": [
{
"date": "2021-05-18T15:28:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-05-18T15:28:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T15:55:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.src",
"product": {
"name": "curl-0:7.61.1-18.el8.src",
"product_id": "curl-0:7.61.1-18.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-0:7.61.1-18.el8.aarch64",
"product_id": "curl-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product_id": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-0:7.61.1-18.el8.x86_64",
"product_id": "curl-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product_id": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-0:7.61.1-18.el8.i686",
"product_id": "libcurl-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.i686",
"product_id": "libcurl-devel-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.i686",
"product_id": "curl-debugsource-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "curl-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-0:7.61.1-18.el8.s390x",
"product_id": "curl-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-devel-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-devel@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product_id": "curl-debugsource-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debugsource@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/curl-minimal-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_id": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcurl-minimal-debuginfo@7.61.1-18.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src"
},
"product_reference": "curl-0:7.61.1-18.el8.src",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-debugsource-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-debugsource-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-devel-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-devel-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-minimal-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
},
"product_reference": "libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.GA"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Marc Aldorasi"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2020-8231",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"discovery_date": "2020-08-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1868032"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl from versions 7.29.0 through 7.71.1. An application that performs multiple requests with libcurl\u0027s multi API, and sets the `CURLOPT_CONNECT_ONLY` option, might experience libcurl using the wrong connection. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8231"
},
{
"category": "external",
"summary": "RHBZ#1868032",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868032"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8231",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8231"
}
],
"release_date": "2020-08-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-05-18T15:28:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:1610"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.src",
"BaseOS-8.4.0.GA:curl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-debugsource-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:curl-minimal-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-debuginfo-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-devel-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-0:7.61.1-18.el8.x86_64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.aarch64",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.i686",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.ppc64le",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.s390x",
"BaseOS-8.4.0.GA:libcurl-minimal-debuginfo-0:7.61.1-18.el8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
}
]
}
RHSA-2021_2471
Vulnerability from csaf_redhat - Published: 2021-06-17 11:35 - Updated: 2024-11-22 16:55Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
Severity
Important
Notes
Topic: Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 8 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)
* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)
* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)
* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.
CWE-290 - Authentication Bypass by SpoofingAffected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
JBoss Core Services Apache HTTP Server 2.4.37 SP8
Red Hat / Red Hat JBoss Core Services
|
cpe:/a:redhat:jboss_core_services:1
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
49 references
Acknowledgments
Varnavas Papaioannou
the Curl project
Viktor Szakats
Facebook
Mingtao Yang
Harry Sintonen
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 8 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)\n\n* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)\n\n* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)\n\n* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:2471",
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1g",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1g"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/"
},
{
"category": "external",
"summary": "1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "1968013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968013"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2471.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update",
"tracking": {
"current_release_date": "2024-11-22T16:55:54+00:00",
"generator": {
"date": "2024-11-22T16:55:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2021:2471",
"initial_release_date": "2021-06-17T11:35:19+00:00",
"revision_history": [
{
"date": "2021-06-17T11:35:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-06-17T11:35:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T16:55:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product": {
"name": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product_id": "JBoss Core Services Apache HTTP Server 2.4.37 SP8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8169",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847916"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: partial password leak over DNS on HTTP redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8169"
},
{
"category": "external",
"summary": "RHBZ#1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8169",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8169.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8169.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: partial password leak over DNS on HTTP redirect"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Viktor Szakats"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22876",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941964"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Leak of authentication credentials in URL via automatic Referer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22876"
},
{
"category": "external",
"summary": "RHBZ#1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
},
{
"category": "workaround",
"details": "This issue can be avoided by using at least one of the following recommendations:\n\n* Do not enable automatic generation of Referer headers when redirects are followed. This functionality is not enabled by default. In the curl command line tool, it is enabled using the -e \u0027;auto\u0027 or --referer \u0027;auto\u0027 command line options. In the libcurl library, it is enabled using the CURLOPT_AUTOREFERER option.\n\n* Do not include authentication credentials in URLs (in the form of https://username:password@example.com), use other methods to provide authentication credentials to curl / libcurl. For the curl command line tool, use -u or --user command line option. For the libcurl library, use CURLOPT_USERPWD or CURLOPT_USERNAME / CURLOPT_PASSWORD options.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Leak of authentication credentials in URL via automatic Referer"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Mingtao Yang"
],
"organization": "Facebook",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22890",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22890"
},
{
"category": "external",
"summary": "RHBZ#1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22890",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22890.html",
"url": "https://curl.se/docs/CVE-2021-22890.html"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Harry Sintonen"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1963146"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22901"
},
{
"category": "external",
"summary": "RHBZ#1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22901.html",
"url": "https://curl.se/docs/CVE-2021-22901.html"
}
],
"release_date": "2021-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:35:19+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2471"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"JBoss Core Services Apache HTTP Server 2.4.37 SP8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend"
}
]
}
RHSA-2021_2472
Vulnerability from csaf_redhat - Published: 2021-06-17 11:47 - Updated: 2024-11-22 16:55Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update
Severity
Important
Notes
Topic: Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)
* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)
* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)
* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)
* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)
* curl: Inferior OCSP verification (CVE-2020-8286)
* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)
* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.
5.9 (Medium)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns "skip" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.
6.5 (Medium)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
Libcurl offers "OCSP stapling" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.
7.4 (High)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.
CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.
CWE-290 - Authentication Bypass by SpoofingAffected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.
8.1 (High)
Affected products
Fixed
143 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
46 references
Acknowledgments
Varnavas Papaioannou
the Curl project
Viktor Szakats
Facebook
Mingtao Yang
Harry Sintonen
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 8 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* curl: Use-after-free in TLS session handling when using OpenSSL TLS backend (CVE-2021-22901)\n\n* httpd: NULL pointer dereference on specially crafted HTTP/2 request (CVE-2021-31618)\n\n* libcurl: partial password leak over DNS on HTTP redirect (CVE-2020-8169)\n\n* curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)\n\n* curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used (CVE-2020-8285)\n\n* curl: Inferior OCSP verification (CVE-2020-8286)\n\n* curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)\n\n* curl: TLS 1.3 session ticket mix-up with HTTPS proxy host (CVE-2021-22890)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2021:2472",
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "1968013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968013"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2472.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update",
"tracking": {
"current_release_date": "2024-11-22T16:55:42+00:00",
"generator": {
"date": "2024-11-22T16:55:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2021:2472",
"initial_release_date": "2021-06-17T11:47:39+00:00",
"revision_history": [
{
"date": "2021-06-17T11:47:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2021-06-17T11:47:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T16:55:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 8",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product_id": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-16.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product_id": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-37.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-6.el8jbcs?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-5.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-20.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product_id": "jbcs-httpd24-0:1-18.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.el8jbcs?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.el8jbcs?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-16.redhat_1.el8jbcs?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-105.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-82.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-55.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-runtime@1-18.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.77.0-2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-74.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-74.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-74.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-36.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.16-5.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-63.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-16.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-105.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite-debuginfo@1.6.1-82.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-40.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-55.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-37.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs-debuginfo@1.1.1g-6.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-5.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-5.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-20.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-20.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24@1-18.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-runtime@1-18.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-debuginfo@7.77.0-2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo@2.4.37-74.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo@2.4.37-74.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-17.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-17.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-36.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-36.el8jbcs?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.16-5.Final_redhat_2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.16-5.Final_redhat_2.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-63.GA.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-63.GA.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo@1.2.48-16.redhat_1.el8jbcs?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-74.jbcs.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-74.el8jbcs?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-0:1-18.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-0:1-18.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-0:1-18.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
"product_id": "8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
},
"product_reference": "jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64",
"relates_to_product_reference": "8Base-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-8169",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1847916"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. A part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers. This highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcurl: partial password leak over DNS on HTTP redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8169"
},
{
"category": "external",
"summary": "RHBZ#1847916",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847916"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8169",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8169"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8169"
},
{
"category": "external",
"summary": "https://curl.haxx.se/docs/CVE-2020-8169.html",
"url": "https://curl.haxx.se/docs/CVE-2020-8169.html"
}
],
"release_date": "2020-06-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libcurl: partial password leak over DNS on HTTP redirect"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902667"
}
],
"notes": [
{
"category": "description",
"text": "A malicious server can use the `PASV` response to trick curl into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions. If curl operates on a URL provided by a user, a user can exploit that and pass in a URL to a malicious FTP server instance without needing any server breach to perform the attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: FTP PASV command response can cause curl to connect to arbitrary host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8284"
},
{
"category": "external",
"summary": "RHBZ#1902667",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902667"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8284",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8284"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8284.html",
"url": "https://curl.se/docs/CVE-2020-8284.html"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using curl by passing the `--ftp-skip-pasv-ip` command line option to curl. For usage of libcurl, set `CURLOPT_FTP_SKIP_PASV_IP` to `1L`[1]. Note that these mitigations could cause problems in the uncommon instance that the server needs the client to connect back to an IP other than the control connection IP address.\n\n1. https://curl.se/libcurl/c/CURLOPT_FTP_SKIP_PASV_IP.html",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: FTP PASV command response can cause curl to connect to arbitrary host"
},
{
"acknowledgments": [
{
"names": [
"Varnavas Papaioannou"
]
}
],
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2020-11-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1902687"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there\u0027s a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8285"
},
{
"category": "external",
"summary": "RHBZ#1902687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1902687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8285"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8285.html",
"url": "https://curl.se/docs/CVE-2020-8285.html"
},
{
"category": "external",
"summary": "https://github.com/curl/curl/issues/6255",
"url": "https://github.com/curl/curl/issues/6255"
}
],
"release_date": "2020-12-09T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2020-12-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1906096"
}
],
"notes": [
{
"category": "description",
"text": "Libcurl offers \"OCSP stapling\" via the CURLOPT_SSL_VERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-status using the curl tool. As part of the OCSP response verification, a client should verify that the response is indeed set out for the correct certificate. This step was not performed by libcurl when built or told to use OpenSSL as TLS backend.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Inferior OCSP verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8286"
},
{
"category": "external",
"summary": "RHBZ#1906096",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1906096"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8286"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2020-8286.html",
"url": "https://curl.se/docs/CVE-2020-8286.html"
}
],
"release_date": "2020-12-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Inferior OCSP verification"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Viktor Szakats"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22876",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941964"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Leak of authentication credentials in URL via automatic Referer",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22876"
},
{
"category": "external",
"summary": "RHBZ#1941964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22876"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22876"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
},
{
"category": "workaround",
"details": "This issue can be avoided by using at least one of the following recommendations:\n\n* Do not enable automatic generation of Referer headers when redirects are followed. This functionality is not enabled by default. In the curl command line tool, it is enabled using the -e \u0027;auto\u0027 or --referer \u0027;auto\u0027 command line options. In the libcurl library, it is enabled using the CURLOPT_AUTOREFERER option.\n\n* Do not include authentication credentials in URLs (in the form of https://username:password@example.com), use other methods to provide authentication credentials to curl / libcurl. For the curl command line tool, use -u or --user command line option. For the libcurl library, use CURLOPT_USERPWD or CURLOPT_USERNAME / CURLOPT_PASSWORD options.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: Leak of authentication credentials in URL via automatic Referer"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Mingtao Yang"
],
"organization": "Facebook",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22890",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2021-03-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1941965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform a man-in-the-middle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22890"
},
{
"category": "external",
"summary": "RHBZ#1941965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22890",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22890"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22890.html",
"url": "https://curl.se/docs/CVE-2021-22890.html"
}
],
"release_date": "2021-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: TLS 1.3 session ticket mix-up with HTTPS proxy host"
},
{
"acknowledgments": [
{
"names": [
"the Curl project"
]
},
{
"names": [
"Harry Sintonen"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2021-22901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2019-05-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1963146"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly, execute arbitrary code with the privileges of a client application using the curl library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-22901"
},
{
"category": "external",
"summary": "RHBZ#1963146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1963146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-22901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22901"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2021-22901.html",
"url": "https://curl.se/docs/CVE-2021-22901.html"
}
],
"release_date": "2021-05-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2021-06-17T11:47:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically. Applications using the APR libraries, such as httpd, must be restarted for this update to take effect.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2021:2472"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-0:1-18.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-curl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-jansson-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-runtime-0:1-18.jbcs.el7.x86_64",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-0:1-18.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-105.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-82.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-curl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-httpd-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-74.el8jbcs.noarch",
"8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-jansson-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.11-55.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.77.0-2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.16-5.Final_redhat_2.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-17.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-16.redhat_1.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-16.redhat_1.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_md-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-36.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-63.GA.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.37-74.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-37.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-5.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.src",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-20.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-6.el8jbcs.x86_64",
"8Base-JBCS:jbcs-httpd24-runtime-0:1-18.el8jbcs.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "curl: Use-after-free in TLS session handling when using OpenSSL TLS backend"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…